List All Integrations
GET/integration
Returns all your integrations, optionally filtered by type.
This request supports integrations with only the following:
- Okta
- Qualys
- Tenable
Request
Query Parameters
Include only Okta, Tenable, and Qualys integrations
Responses
- 200
successful operation
- application/json; charset=UTF-8
- Schema
- Example (from schema)
Schema
- Array [
- Array [
- Array [
- Array [
- ]
- For email notifications: List of unique email addresses to notify
- For integrations without notification templates: List of integration ids
- For integrations with notification templates: List of notification template ids
- ]
- Array [
- ]
- ]
- ]
alertRules object[]
Alert Rules
alertRuleNotificationConfig object[]
List of data for notifications to third-party tools
Day of month
daysOfWeek object[]
Days of week
Possible values: [SU
, MO
, TU
, WE
, TH
, FR
, SA
]
Provide csv detailed report
Scan enabled
Possible values: [as_it_happens
, daily
, weekly
, monthly
]
Frequency from RRule
Hour of day
Alert rule notification config ID
Include remediation in detailed report
Last Updated
Time of last notification in milliseconds
Template ID
Java time zone ID (e.g. America/Los_Angeles)
Possible values: [email
, slack
, splunk
, amazon_sqs
, jira
, microsoft_teams
, webhook
, aws_security_hub
, google_cscc
, service_now
, pager_duty
, azure_service_bus_queue
, demisto
, aws_s3
, snowflake
]
Integration type
Compress detailed report
Allow Auto-Remediation
Delay notifications by the specified milliseconds
Rule/Scan description
Rule/Scan is enabled
Last modified by
Last modified on this date/time in milliseconds
Rule/Scan name
include dismissed alerts in notification
include open alerts in notification
include resolved alerts in notification
include snoozed alerts in notification
List of specific policies to scan
Policy labels
Policy Scan Config ID
Scan all policies
target objectrequired
Model for Target Filter
List of Account group(s)
alertRulePolicyFilter object
Model for Alert Rule Policy Filter
List of available Alert Rule Policy Filters
Possible values: [ALL
, AWS
, AZURE
, GCP
, ALIBABA_CLOUD
, OCI
, IBM
]
Cloud Type Filter
Compliance Standard Filter
Policy Label Filter
Policy Severity Filter
List of excluded accounts
includedResourceLists object
Model for holding the lists resource list ids by resource list type
List of regions for which alerts will be triggered for account groups. Alerts not associated with specific regions will be triggered regardless of listed regions. If no regions are specified, then the alerts will be triggered for all regions.
tags object[]
List of TargetTag models (resource tags) for which alerts should be triggered
Resource tag target
List of value(s) for resource tag key
Created by
Creation timestamp in milliseconds
Integration description
true = Enabled
Integration ID
integrationConfig object
Integration Configuration. The values depend on the integration type.
Possible values: [EMAIL
, SLACK
, SPLUNK
, AMAZON_SQS
, WEBHOOK
, MICROSOFT_TEAMS
, AZURE_SERVICE_BUS_QUEUE
, JIRA
, SERVICE_NOW
, PAGER_DUTY
, DEMISTO
, AWS_S3
, SNOWFLAKE
, TENABLE
, QUALYS
, AZURE_SECURITY_CENTER
, GOOGLE_CSCC
, AWS_SECURITY_HUB
, AWS_SDL
, OKTA_IDP
]
Integration type
Last modified by
Last modification timestamp in milliseconds
Integration name
reason object
Model for Integration Status Details
details object
Model for Message Details
Internationalization key
Status code
Subject
Possible values: [INVALID_CONFIG
, TRANSLATION_EXCEPTION
, INVALID_TEMPLATE_CONFIG
, HTTP_EXCEPTION
, OTHERS
, TEST
]
Error type
Last updated
Message
Possible values: [GREEN
, RED
, YELLOW
, NA
]
State of integration
true = Is valid
[
{
"alertRules": [
{
"alertRuleNotificationConfig": [
{
"dayOfMonth": 0,
"daysOfWeek": [
{
"day": "SU",
"offset": 0
}
],
"detailedReport": true,
"enabled": true,
"frequency": "as_it_happens",
"frequencyFromRRule": "string",
"hourOfDay": 0,
"id": "string",
"includeRemediation": true,
"lastUpdated": 0,
"last_sent_ts": 0,
"recipients": [
"string"
],
"rruleSchedule": "string",
"templateId": "string",
"timezone": "string",
"type": "email",
"withCompression": true
}
],
"allowAutoRemediate": true,
"delayNotificationMs": 0,
"description": "string",
"enabled": true,
"lastModifiedBy": "string",
"lastModifiedOn": 0,
"name": "string",
"notifyOnDismissed": true,
"notifyOnOpen": true,
"notifyOnResolved": true,
"notifyOnSnoozed": true,
"policies": [
"string"
],
"policyLabels": [
"string"
],
"policyScanConfigId": "string",
"scanAll": true,
"target": {
"accountGroups": [
"string"
],
"alertRulePolicyFilter": {
"availablePolicyFilters": [
"string"
],
"cloud.type": [
"ALL"
],
"policy.complianceStandard": [
"string"
],
"policy.label": [
"string"
],
"policy.severity": [
"string"
]
},
"excludedAccounts": [
"string"
],
"includedResourceLists": {
"computeAccessGroupIds": [
"string"
]
},
"regions": [
"string"
],
"tags": [
{
"key": "string",
"values": [
"string"
]
}
]
}
}
],
"createdBy": "string",
"createdTs": 0,
"description": "string",
"enabled": true,
"id": "string",
"integrationConfig": {},
"integrationType": "EMAIL",
"lastModifiedBy": "string",
"lastModifiedTs": 0,
"name": "string",
"reason": {
"details": {
"i18nKey": "string",
"statusCode": 0,
"subject": "string"
},
"errorType": "INVALID_CONFIG",
"lastUpdated": 0,
"message": "string"
},
"status": "GREEN",
"valid": true
}
]